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In the Claims 

1. (Currently Amended) A computer readable medium, method o f comprising 
instructions for metering execution of code, the instructions comprising: 
receivin g, at a protected service, a call from an application requesting 

asking for execution of a-the p rotected service within a first runtime 

area; 

requesting permission for the execution , wherein the request is made by the 
protected service to a metering engine operating in a second runtime 
area, wherein the request is made through a secure transmission 
layer ; and 



analyzing the request , at the metering engine, wherein the analyzing 

comprises: for p e rmission; and 
basing status of the permi ss i o n on the analysis. 

referencing, within the metering engine, a service contract 

comprising rules governing operat io n of the protected service; 
referencing, within the metering engine, a secure store of meter data. 

wherein the meter data comprises historical data reflecting 

past operation of the protected service; 
using the rules and the meter data to decide the requested 

permission; and 
updating the metering data to reflect the analysis. 
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2. (Currently Amended) The computer readable medium method of claim 1, 



service contracts . 

3. (Currently Amended) The computer readable medium m ethod of claim 
S claim 1 , wherein the first and second runtime areas reside in different 
partitions of memory. 

4. (Currently Amended) The computer readable medium m et hod of claim 
3 claim 1 , wherein the first runtime area is located at a first computing 
device and the second runtime area is located at a second computing device. 

5. (Currently Amended) The computer readable medium method of claim 1, 
wherein analyzing the request comprises using a contract andt he meter data 
as inputs comprises a number of times a protected servi c e has been called . 

6. (Currently Amended) The computer readable medium method of claim 5, 
additionally comprising updatin gw herein the meter data to reflect the 
analysis contains information relevant to more than one protected service . 

7. (Currently Amended) The computer readable medium method of claim 1, 
wherein requesting permission comprises opening a secure connection 



wherein the analysis is made within a second runtime 



separate from 




service contract is selected from among multiple 
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between the protected service and a metering engine configured to perform 
the analysis. 

8. (Currently Amended) The method computer readable medium of claim 1, 
wherein requesting permission comprises sending an encrypted message 
from the protected service in the first runtime area to a-the metering engine 
within the second runtime area. 

9. (Currently Amended) The computer readable medium method of claim 1, 
wherein the permission was given, additionally comprising: 

executing the protected service; and 

returning results of the execution to an-the applicatio n that initiated the call . 

10. (Currently Amended) The computer readable medium m ethod of claim 1, 
wherein the permission was not given, additionally comprising returning 
notice of failure to execute the protected service to an application that 
initiated the call. 

11. (Currently Amended) A processor-readable medium comprising processor- 
executable instructions for metering execution of code, the processor- 
executable instructions comprising instructions for: 

receiving , at a protected service, a Feques^ call from an application asking 
for execution of a-the protected service; 
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requesting authorization to execute the protected service, wherein the 
authorization request is made from the protected service to a 
metering engine through a secure transmission layer ; and 

analyzing, with the metering engine, a contract in view of meter data to 
determine if the authorization request to use the protected service by 
an— the application should be allowed , wherein the analyzing 
comprises: 

referencing, within the metering engine, the contract, wherein the 
contract comprises rules governing operation of the protected 
service; 

referencing, within the metering engine, a secure store of meter data. 

wherein the meter data comprises historical data reflecting 

past operation of the protected service; 
using the rules and the meter data to decide the requested 

authorization; and 
updating the metering data to refl e ct the analysis . 

12. (Original) The processor-readable medium as recited in claim 1 1, wherein 
the metering engine operates within a runtime area that is separate from a 
runtime area within which the protected service operates. 

13. (Currently Amended) The processor-readable medium as recited in claim 
11, wherein the analyzing comprises instructions for: 
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analyzing the contract using the meter data and identity of the protected 

service as input to an-the analysis^and 
updating the meter data to reflect the analysis . 

14. (Cancelled) 

15. (Original) The processor-readable medium as recited in claim 11, wherein 
the metering of code execution is performed in a managed code 
environment. 

16. (Original) The processor-readable medium as recited in claim 11, 
. additionally comprising, where the authorization request was allowed, 

instructions for: 

executing the protected service; and 

returning results of the execution to the application. 

17. (Original) The processor-readable medium as recited in claim 11, 
additionally comprising, where the authorization request was not allowed, 
instructions for returning notice of failure to execute to the application. 

18. (Original) The processor-readable medium as recited in claim 11, 
comprising further instructions for protecting communications between the 
protected service and the metering engine with cryptography. 
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19. (Currently Amended) A code- executing device, comprising: 

first and second runtime areas with a secure communication channel 
between them; 

a protected service configured to receive a request from an application for 

execution of the protected service within the first runtime area; and 
a metering engine, configured to receive the request and to operate within 
the second runtime area and to return an allowance code or a 
rejection code in response to the request by applying rules to meter 
dat a, wherein the metering engine comprises: 
an enforcement engine, configured f or secur e communication with 

the protected service; 
a service contract configured to supply the rules governing 

operation of the protected service, to the enforcement engine; 

and 

a secure store, within which the meter data is contained, wherein the 
secure store is configured to supply, to the enforcement 
engine, historical data reflecting past operation of the 
protected service . 

20. (Canceled) 

21. (Currently Amended) The code-executing device of claim 19, wherein the 
metering engine is configured to: 
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use identity of the protected service and data from a- the secure store of 
meter data as input to an analysis providing return of the allowance 
code or the rejection code; and 

update the secure store of meter data to reflect the analysis. 

22. (Original) The code-executing device of claim 19, wherein the code- 
executing device is a cellular telephone. 

23. (Original) The code-executing device of claim 19, wherein the code- 
executing device is configured for use within a managed code environment. 

24. (Original) The code- executing device of claim 19, wherein the code- 
executing device is a compound device, and wherein the protected service 
is contained on a first portion of the compound device and the metering 
engine is contained on a second portion of the compound device, and 
wherein the first portion of the compound device is remotely located from 
the second portion of the compound device. 

25. (Original) The code- executing device of claim 19, additionally comprising 
a library of protected services, within which the protected service is 
contained. 

26. (Original) The code-executing device of claim 19, additionally comprising 
a library of applications, within which the application is contained. 
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27. (Currently Amended) A computer readable medium comprising 
instruction s for o perating a managed code environment, the instructions 
comprising: 

an application configured to consume services from a library of protected 
services; 

a protected service, within the library of protected services, configured to 

receive a request from the application for execution; and 
a metering engine, configured to return of an allowance code or a rejection 
code to the request based on rules governing operation of the 
protected service , wherein the metering engine comprises: 
an enforcement engine, configured for secure communication with 

the protected service: 
a service contract, configured to supply the rules governing 

operation of the protected service, to the enforcement engine: 

and 

a secure store, within which the meter data is contained, wherein the 
secure store is configured to supply, to the enforcement 
engine, historical data reflecting past operation of the 
protected service . 

28. (Currently Amended) The computer readable medium managed code 
environment of claim 27, wherein the protected service and the metering 
engine operate within different runtime areas. 
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29. (Cancel) 

30. (Currently Amended) The computer readable medium managed code 
environment of claim 27, wherein the metering engine comprises: 

a service contract containing the rules governing operation of the protected 

a secure store of meter data; and 

an-enforcement engine isconfigured to return of the allowance code or the 
rejection code by: 

analyzing the service contract using identity of the application, 
identity of the protected service, and data from the secure 
store of meter data as input to the analysis; and 

updating the secure store of meter data to reflect the analysis. 

31. (Currently Amended) A code-executing device for metering execution of 
code, the code-executing device comprising: 

means for calling a protected service from an application; 

means for calling a metering engine from the protected service; and 

means for analyzing a contract to determine whether to allow or prohibit 

use of the protected service by the application , wherein the analyzing 

comprises: 

referencing, within the metering engine, a service contract 
comprising rules governing operation of the protected service: 
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referencing, within the metering engine, a secure store of meter data, 
wherein the meter data comprises historical data reflecting 
past operation of the protected service; 

using the rules and the meter data to decide the requested 
permission; and 

updating the metering data to reflect the analysis . 

32. (Original) The code-executing device as recited in claim 31, additionally 
comprising, where allowance was determined to be appropriate: 

means, defined in the protective service, for executing functionality 

requested by the application; and 
means for returning results of the execution to the application. 

33. (Original) The code-executing device as recited in claim 31, additionally 
comprising, where rejection was determined to be appropriate, means for 
returning notice of the rejection to the application. 

34. (Currently Amended) The code-executing device as recited in claim 31, 
wherein the means for analyzing the contract comprises: 

means for analyzing the contract using identity of the application, identity 
of the protected service, rules within the contract, and data from a 
secure store of meter data as input to the analysist-and 

m e ans for updating th e s e cur e store of motor data to reflect the analysis . 
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35. (Original) The code- executing device as recited in claim 31, wherein the 
means for calling the metering engine comprises: 

means for opening a secure connection between the protected service and 

the metering engine; and 
means for operating the protected service and the metering engine within 

distinct runtime areas. 

36. (Original) The code-executing device as recited in claim 31, wherein the 
metering is performed in a managed code environment. 
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